Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          gb+EBFsjBQebeD9BUVVr4fD6OPcuXJuhCSMZpF9BJ0U=
Subject key identifier:   8E:51:24:71:8E:B8:04:E2:13:93:1F:B7:A8:52:3F:2E:B7:AA:C6:F0
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       019E98BAFA6084DC91CA7C81E5CC21B08E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          1945
Signing time:             Fri 05 Jun 2026 17:00:51 +0000
Manifest this update:     Fri 05 Jun 2026 17:00:51 +0000
Manifest next update:     Sat 06 Jun 2026 17:00:51 +0000
Files and hashes:         1: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (hash: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: Si54XU8xvi7uTyxMbJfjla1Ju5zvztEdgyUm10odTns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:ba:fa:60:84:dc:91:ca:7c:81:e5:cc:21:b0:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Jun  5 17:00:51 2026 GMT
            Not After : Jun  6 17:00:51 2026 GMT
        Subject: CN=8e5124718eb804e213931fb7a8523f2eb7aac6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:42:c4:56:e8:61:76:aa:53:0f:eb:48:86:
                    a5:46:ea:31:00:62:1b:f6:34:99:9b:43:ac:b9:08:
                    e9:0a:e3:eb:99:50:4c:9f:fa:f9:c0:b4:b9:6e:98:
                    aa:c9:ed:9c:0c:28:4b:d5:c8:31:6e:c7:62:ed:af:
                    46:46:91:cb:77:cd:3d:0a:44:3f:93:8c:be:6e:d8:
                    13:cb:68:9e:d3:c0:55:af:98:ed:ee:58:dc:44:54:
                    3c:e7:cb:02:38:3b:3c:01:b5:80:be:71:e8:38:09:
                    26:4b:14:f8:3f:b9:74:34:be:74:ad:31:01:1e:bb:
                    52:ed:5f:04:0e:8b:81:bb:30:ba:8e:97:60:3a:5f:
                    fc:7c:48:9f:68:dd:4c:68:49:62:24:f9:7a:5a:ff:
                    e7:10:02:0c:52:2d:d0:90:24:d4:07:eb:3c:e0:66:
                    8f:0c:d6:c4:d3:9b:c9:32:cc:d8:7c:03:a2:c3:c4:
                    47:1b:84:50:4b:86:cc:66:cc:21:f4:6f:af:b0:1a:
                    7a:6d:fa:61:02:34:8f:71:55:1e:f3:08:97:69:76:
                    b6:77:63:92:5f:a2:2f:85:ec:23:ed:b9:ea:b0:2f:
                    d1:33:5c:66:a9:7b:40:5f:99:f8:27:b0:99:0f:54:
                    fa:84:dc:fd:b1:ac:71:46:a9:7e:75:3e:e7:2b:21:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:24:71:8E:B8:04:E2:13:93:1F:B7:A8:52:3F:2E:B7:AA:C6:F0
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:89:75:6f:93:98:0b:d2:0f:72:6f:b7:21:76:48:da:11:
         44:53:53:f7:12:b6:97:98:fa:17:c7:da:5d:a1:14:86:75:27:
         a4:66:87:e3:6d:f1:c1:39:a3:a7:31:fd:06:51:53:57:62:81:
         be:76:11:37:47:5c:71:8a:54:1e:3a:e1:53:83:0e:87:aa:6e:
         fd:67:3a:3a:c8:46:60:77:c1:29:16:f9:aa:15:81:f5:73:cf:
         64:85:4a:de:6a:24:ba:65:0f:de:bc:1b:46:c2:73:24:cc:52:
         88:b3:e9:84:61:31:69:9a:0e:ec:8f:8c:48:db:bb:d0:13:cc:
         83:90:8b:4f:fc:76:5e:8e:0c:3a:8c:c8:ff:a7:a3:e3:b4:f8:
         dd:08:ed:07:86:4c:f4:a6:8c:87:99:b6:f6:23:72:f5:f1:3a:
         38:b1:66:b2:da:d8:b3:52:ed:07:e7:b2:40:ae:ba:7d:f0:88:
         3b:a3:1a:ed:d5:ea:d7:85:27:e7:f8:df:25:6c:37:65:d0:bd:
         f0:59:c4:8f:af:99:65:cc:b9:21:4e:5e:b6:2e:c2:74:80:91:
         c7:57:d9:a8:39:1d:17:47:7e:9c:b9:04:5a:f8:4f:95:ca:5d:
         b8:8b:cb:06:b7:b2:89:d6:0f:0b:1c:e6:30:c0:f1:52:46:9f:
         f0:3c:b1:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6YuvpghNyRynyB5cwhsI4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YmIyNGM0Yjk3ODNjYTIzYjZlZDVlNzUwNDQzZWVkM2E3
MmY5M2IwHhcNMjYwNjA1MTcwMDUxWhcNMjYwNjA2MTcwMDUxWjAzMTEwLwYDVQQD
Eyg4ZTUxMjQ3MThlYjgwNGUyMTM5MzFmYjdhODUyM2YyZWI3YWFjNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBCxFboYXaqUw/rSIalRuoxAGIb
9jSZm0OsuQjpCuPrmVBMn/r5wLS5bpiqye2cDChL1cgxbsdi7a9GRpHLd809CkQ/
k4y+btgTy2ie08BVr5jt7ljcRFQ858sCODs8AbWAvnHoOAkmSxT4P7l0NL50rTEB
HrtS7V8EDouBuzC6jpdgOl/8fEifaN1MaEliJPl6Wv/nEAIMUi3QkCTUB+s84GaP
DNbE05vJMszYfAOiw8RHG4RQS4bMZswh9G+vsBp6bfphAjSPcVUe8wiXaXa2d2OS
X6Ivhewj7bnqsC/RM1xmqXtAX5n4J7CZD1T6hNz9saxxRql+dT7nKyGnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5RJHGOuATiE5Mft6hSPy63qsbwMB8GA1UdIwQY
MBaAFMe7JMS5eDyiO27V51BEPu06cvk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzIt
NGI1OTU3YWE3NDdmLzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hZDA4ZTYtNzMzMi00NmExLWJmNzItNGI1OTU3YWE3NDdm
LzEveDdza3hMbDRQS0k3YnRYblVFUS03VHB5LVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ2JdW+T
mAvSD3JvtyF2SNoRRFNT9xK2l5j6F8faXaEUhnUnpGaH423xwTmjpzH9BlFTV2KB
vnYRN0dccYpUHjrhU4MOh6pu/Wc6OshGYHfBKRb5qhWB9XPPZIVK3mokumUP3rwb
RsJzJMxSiLPphGExaZoO7I+MSNu70BPMg5CLT/x2Xo4MOozI/6ej47T43QjtB4ZM
9KaMh5m29iNy9fE6OLFmstrYs1LtB+eyQK66ffCIO6Ma7dXq14Un5/jfJWw3ZdC9
8FnEj6+ZZcy5IU5eti7CdICRx1fZqDkdF0d+nLkEWvhPlcpduIvLBreyidYPCxzm
MMDxUkaf8Dyxuw==
-----END CERTIFICATE-----
Generated at Fri Jun 5 19:56:25 2026 by rpki-client